SCHiM

9 ms·

61.
by SCHiM 5y ago
> That's usually a good thing. For any individual company able to offload the blame, that's great. It's not so great if half the countries' doorbells, robot cleaners, various home streaming service setups, the baby ca
62.
by SCHiM 5y ago
I think this adds some momentum to the pendulum swinging back the other way. Maybe cloud teams can patch your services better than your in-house team can (See 2 critical issues in Azure the last 3 months, _caused_ by MS itself). Maybe the c
63.
by SCHiM 5y ago
Although I can't claim a long tenure in the software development field. One of my favorite tricks/rediscovered performance enhancer can be found in a similarity between very old-school self-modifying code, and modern day profile g
64.
by SCHiM 5y ago
Although I think bots should be free to access the same content as humans do, I have a suggestion for your fuzzer anti-bot-spray: It won't work on the more sturdy samples, but maybe try a GZIP bomb on https streams: https://
65.
by SCHiM 5y ago
A long time ago, before my frontal lobe had completely developed, I used to develop multiplayer game cheats. I now recognize that behavior as abhorrent, but in those days I thought it was l33t. In any case, no mater how good your protection
66.
by SCHiM 5y ago
I mean, obviously the best thing is: 1gram, 100gram, container size. That way: you always know the exact amount you're actually buying, + it's easy to calculate if you consume less than the container, either by nx the amount of 1g
67.
by SCHiM 5y ago
Same with the energy label of food. In the metric system: Portion sizes of 65 gram in a 90 gram container. Then the label shows for 10 gram, portion size, and 100 grams. But not the actual weight of the container! I mean, what 'portion
68.
by SCHiM 5y ago
Ohhh man/woman. I'm a security person. I often work with my customers' central IT. I'm not going to have an opinion or judge you, but consider: You're giving people nightmares. I've seen it go very wrong (front
69.
by SCHiM 5y ago
I think this is a good thing. It might show potential victims that their opponents are not a bunch of smelly teenagers hopping online after midnight. These are multi-million (billion?) businesses. There's strategic leadership, target a
70.
by SCHiM 5y ago
A properly configured Defender ATP instance in a network is a beast to circumvent for attackers. It's a really nice piece of software as far as I'm concerned. Defender on personal systems owned & maintained by a knowledgeable
71.
by SCHiM 5y ago
It's the same old same old. Like you correctly identified it's a new place, it looks different. People don't think an attacker could approach them over IM, but they can. But the problem goes beyond that. Many organizations ha
72.
by SCHiM 5y ago
I've been in security for ages, ransomware was there but has evolved since then. Two other reasons can explain the increase in ransomware, that merely correlate with the rise of cryptocurrencies: 1) The innovation of encrypting files h
73.
by SCHiM 5y ago
Because they run their operations from there, and don't mess around where they live. Part of their profits pays for protection. Extracting value, and crippling western companies aligns with the strategic goals of these countries. And r
74.
by SCHiM 5y ago
Why should others decide if I can run useless hashing functions on my computer? Price the electricity accordingly, and make PoW impossible. Cryptocurrency is no the enabler of ransomware. Ransomware was prevalent before cryptocurrencies. Th
75.
by SCHiM 5y ago
I mean, a bullshit job is someone who spends their entire workday in meetings, answering e-mails and generating reports. None of which is useful if it isn't actually in support of _real_ work. If you were to mediate conflicts all day b
76.
by SCHiM 5y ago
I mean, just imagine, you go the the slave market and they tell you that the court ordered them to stop selling slaves on the basis that some laws say that you cannot do so! Burning fossil fuels is bad. Shell is in the business of producing
77.
by SCHiM 5y ago
""" How can the adversary construct unencrypted Wi-Fi frames so they are accepted by a vulnerable device? First, certain Wi-Fi devices accept any unencrypted frame even when connected to a protected Wi-Fi network. "&quo
78.
by SCHiM 5y ago
Not to be too offensive, but it _is_ lazy no? This stuff is important! I feel like it's (and has been for a while) going wrong. I know user education it mostly a pipe dream. But it's all I can think of. The iPhone is probably rela
79.
by SCHiM 5y ago
I mean sure IOS is hassle free and all that, but on IOS you're also a computational serf, computing at the whims of your apple overlords. I've thought one member of my family to setup their own wireless access point. And they can
80.
by SCHiM 5y ago
The user most definitively has to know these things. Your argument is a race to the bottom I think. We will end up with devices where the user has to know nothing, cannot do anything and is lazy and easily led. Just as moving yourself aroun
81.
by SCHiM 5y ago
I don't understand how this isn't common knowledge: smart TVs are universally bad. This was figured out years ago. Just get a good screen + hdmi/dvi port and attach your laptop. No ads on your screensaver, no screen tracking
82.
by SCHiM 5y ago
I don't think I have the full definition. But if you think about online games, it becomes abandonware if you can no longer log into the game servers? Or if your product is dependent on DRM, then is becomes abandonware when the DRM serv
83.
by SCHiM 5y ago
The difference between the time it takes physical copies to wear out is much much longer than the time it takes $company to decide that it's time to force everyone to buy the next latest-and-greatest. I've got NES cartridges from
84.
by SCHiM 5y ago
Do you think it'd be a good idea to force companies to open source abandonware? We could claw back space from copyright laws, and force companies to remove DRM schemes, open source DRM-ed copyright, servers and any/all assets requ
85.
by SCHiM 5y ago
No, the big difference is, that if it leaked from their lab _they_ are responsible. That's not a witch hunt. If I crash my car into your car today, it does not matter that you crashed your car into someone else two years ago.
86.
by SCHiM 5y ago
Except it is. IS used facebook for a lot of their communication. Imagine a code like: "Ten camels drink from the water at $some oasis". Meaning: "Attack $city at 10 AM tomorrow" Or "Meet at $place at 10 tomorrow&quo
87.
by SCHiM 5y ago
This stuff probably wasn't around when IP was designed, but in my own toy routing network protocols I use bloom filters and cuckcoo filters to remove duplicate packets. Trivial amount of space and computation, easy fix for loop issues.
88.
by SCHiM 5y ago
Who cares about the optics of it? We now know it's bad, that type of whataboutism is the most destructive and dumb kind that exists. Serously we should just pay for their solar panels, windfarms and reactors and be done with it.
89.
by SCHiM 6y ago
The code runs on your machine. You do not own the game, the idea behind the game or the logic, but you do own the copy of the game on your machine. You can read and change your copy, regardless of what the ToS says. The owner of the game ca
90.
by SCHiM 6y ago
I can confirm MSVC. Not sure about clang. Although you can disable this. The default release builds, with optimization, leaks: paths, names and symbol names.

More ›